Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft
File: X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft (raw, json)
Hash identifier: c+TtsNhcG+OAAJaTFxAlY92f6liVNbDt60Ersqm5wPo=
Subject key identifier: 0A:8D:0F:6F:49:EA:45:5E:92:E5:81:1B:09:79:95:1A:EC:10:4F:DD
Authority key identifier: 5F:62:FE:78:D2:31:9F:3F:C1:F1:58:2F:37:C6:4A:03:DA:EF:79:4B
Certificate issuer: /CN=5f62fe78d2319f3fc1f1582f37c64a03daef794b
Certificate serial: 019D3451FE6EEE48B7020884E908EE99DF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft
Manifest number: 90
Signing time: Sat 28 Mar 2026 12:01:21 +0000
Manifest this update: Sat 28 Mar 2026 12:01:21 +0000
Manifest next update: Sun 29 Mar 2026 12:01:21 +0000
Files and hashes: 1: X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl (hash: VTbFtofcVV4IU7x2+VgcO8DpahudPw/QvvAZqKGujyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:fe:6e:ee:48:b7:02:08:84:e9:08:ee:99:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f62fe78d2319f3fc1f1582f37c64a03daef794b
Validity
Not Before: Mar 28 12:01:21 2026 GMT
Not After : Mar 29 12:01:21 2026 GMT
Subject: CN=0a8d0f6f49ea455e92e5811b0979951aec104fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:1b:d6:1c:30:14:bb:9b:94:a5:68:ef:f8:
ee:5c:94:aa:e2:6c:07:f3:b5:bc:77:29:e5:30:bc:
6c:59:06:89:fe:79:9d:60:75:10:01:0b:97:e2:34:
25:1e:91:73:df:03:b0:4f:40:6f:e0:3b:67:bb:39:
a1:8b:7b:17:cf:7b:ac:11:a5:42:3b:d5:f5:96:e4:
1c:6d:9d:51:f6:36:6d:96:4b:d3:58:c6:1d:e2:d8:
ad:a9:ec:bf:54:ff:f0:e7:0b:eb:5c:3c:05:92:c6:
d2:65:58:51:32:35:87:96:82:84:56:8f:b1:11:79:
e8:be:6d:3a:68:ad:7a:da:d2:f9:8c:7c:2a:46:46:
b1:e1:36:13:86:04:1e:f2:31:72:80:84:bd:84:f4:
8c:d4:1c:9c:30:2e:f3:68:be:60:57:e2:1a:56:44:
ca:4b:fb:f3:9b:3b:49:c3:6b:09:38:d0:46:45:8c:
9b:95:3c:a8:0f:64:51:7d:c1:27:a1:d1:87:08:53:
4f:e1:ef:44:53:83:ad:0d:91:9b:a4:bc:9b:c0:b7:
ce:04:15:c7:5f:ed:6c:dd:90:0e:dd:ba:6a:02:e0:
20:8f:98:10:25:78:8d:51:98:81:39:00:88:78:6f:
e5:bf:4f:2e:10:b4:f6:99:39:3b:39:01:22:53:61:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:0F:6F:49:EA:45:5E:92:E5:81:1B:09:79:95:1A:EC:10:4F:DD
X509v3 Authority Key Identifier:
keyid:5F:62:FE:78:D2:31:9F:3F:C1:F1:58:2F:37:C6:4A:03:DA:EF:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:56:11:ae:97:5f:f6:da:e3:8f:28:59:f5:c3:45:02:98:4c:
79:c9:45:1e:22:7c:42:4c:04:d2:7d:7b:0e:0a:b6:2a:93:e8:
8c:43:5b:4f:d8:26:58:f9:f4:a9:60:91:c1:ea:5e:28:a4:dc:
f4:a4:64:09:03:22:61:e2:47:bc:98:a6:d9:32:52:8f:3e:e2:
15:39:cb:ea:a8:be:e6:e4:77:b8:d9:41:75:fa:90:71:a1:9b:
e3:30:23:ab:8c:ec:c5:38:6d:75:01:b2:e8:f3:39:98:b4:c5:
80:01:8f:24:50:02:6b:3e:84:0a:53:34:23:fe:c1:93:59:f8:
a1:04:80:d4:c7:d7:aa:86:bb:b2:23:c7:dd:55:3a:e6:c3:c6:
9e:d0:e6:03:a9:ff:09:fb:f3:60:de:b6:cc:13:5c:ff:b9:ba:
ea:2c:3e:31:f6:e4:e0:67:49:84:ca:3c:1c:a7:4c:7c:c0:83:
7c:a5:fa:ed:0f:a6:07:59:11:f4:ca:ac:c9:41:74:df:06:0f:
75:5f:fe:d9:93:1c:62:77:87:1f:62:d0:54:8c:54:b9:2d:f8:
18:cb:54:73:f2:e8:e3:80:07:24:3c:52:c7:45:e7:b4:7f:e3:
b6:09:ea:fe:d1:b8:a3:03:61:18:b1:f5:41:c1:15:35:0b:2a:
1a:67:17:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00Uf5u7ki3AgiE6Qjumd+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNjJmZTc4ZDIzMTlmM2ZjMWYxNTgyZjM3YzY0YTAzZGFl
Zjc5NGIwHhcNMjYwMzI4MTIwMTIxWhcNMjYwMzI5MTIwMTIxWjAzMTEwLwYDVQQD
EygwYThkMGY2ZjQ5ZWE0NTVlOTJlNTgxMWIwOTc5OTUxYWVjMTA0ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hEb1hwwFLublKVo7/juXJSq4mwH
87W8dynlMLxsWQaJ/nmdYHUQAQuX4jQlHpFz3wOwT0Bv4Dtnuzmhi3sXz3usEaVC
O9X1luQcbZ1R9jZtlkvTWMYd4titqey/VP/w5wvrXDwFksbSZVhRMjWHloKEVo+x
EXnovm06aK162tL5jHwqRkax4TYThgQe8jFygIS9hPSM1BycMC7zaL5gV+IaVkTK
S/vzmztJw2sJONBGRYyblTyoD2RRfcEnodGHCFNP4e9EU4OtDZGbpLybwLfOBBXH
X+1s3ZAO3bpqAuAgj5gQJXiNUZiBOQCIeG/lv08uELT2mTk7OQEiU2HUrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqND29J6kVekuWBGwl5lRrsEE/dMB8GA1UdIwQY
MBaAFF9i/njSMZ8/wfFYLzfGSgPa73lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xZjEzMDctNjM5Ni00MWMwLWE1MDUt
MDU0YmZkYWZkODhhLzEvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xZjEzMDctNjM5Ni00MWMwLWE1MDUtMDU0YmZkYWZkODhh
LzEvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1YRrpdf
9trjjyhZ9cNFAphMeclFHiJ8QkwE0n17Dgq2KpPojENbT9gmWPn0qWCRwepeKKTc
9KRkCQMiYeJHvJim2TJSjz7iFTnL6qi+5uR3uNlBdfqQcaGb4zAjq4zsxThtdQGy
6PM5mLTFgAGPJFACaz6EClM0I/7Bk1n4oQSA1MfXqoa7siPH3VU65sPGntDmA6n/
CfvzYN62zBNc/7m66iw+Mfbk4GdJhMo8HKdMfMCDfKX67Q+mB1kR9MqsyUF03wYP
dV/+2ZMcYneHH2LQVIxUuS34GMtUc/Lo44AHJDxSx0XntH/jtgnq/tG4owNhGLH1
QcEVNQsqGmcXEA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:45 2026 by rpki-client